23835 matches found
CVE-2026-9195
creationtimestamp| type| source ---|---|--- 2026-08-05 17:20:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzxqhflx2b 2026-08-06 16:15:56+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...
CVE-2026-10025 IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability
IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity XXE injection vulnerability. The vulnerability resides in the parseXmlPayload function within the event processing pipeline q1labscore.jar . When at least one log source type is configured...
CVE-2026-48911
creationtimestamp| type| source ---|---|--- 2026-08-05 15:25:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4ygjgczwvv462...
CVE-2026-16443
creationtimestamp| type| source ---|---|--- 2026-08-05 14:20:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jb5m44hrlhlib 2026-08-06 13:10:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a...
brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays
A flaw was found in the brace-expansion library. An attacker can provide specially crafted input to the expand function, which fails to apply length restrictions when creating intermediate arrays. This oversight allows the attacker to exhaust system memory or block the event loop, leading to a...
CVE-2026-16100 Keycloak-services: keycloak-services: unbounded metric cardinality in user event metrics via request-controlled error text
A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from failed account operations as Prometheus metric labels. Because these error messages can include user-supplied input like nonexistent client IDs, an authenticated...
CVE-2026-16100
CVE-2026-16100 describes a flaw in Keycloak where, when metrics are enabled, raw error messages from failed account operations are recorded as Prometheus metric labels. Because these messages may include user-supplied input (e.g., nonexistent client IDs), an authenticated user can generate an eno...
CVE-2026-16100
A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from failed account operations as Prometheus metric labels. Because these error messages can include user-supplied input like nonexistent client IDs, an authenticated...
Malicious code in statist-browser-typed-client-sme.platform.mobile.voip.common.events (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb43194ddda04c3dffa5cb6bea02c8bc6edba8623acf172c5da744b2488e13b0 On require, compat.js selects a platform-specific payload path and downloads an opaque binary from one of four Cloudflare Workers hosts...
MAL-2026-12452 Malicious code in statist-browser-typed-client-sme.platform.mobile.voip.common.events (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb43194ddda04c3dffa5cb6bea02c8bc6edba8623acf172c5da744b2488e13b0 On require, compat.js selects a platform-specific payload path and downloads an opaque binary from one of four Cloudflare Workers hosts...
CVE-2026-17578
Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate withou...
CVE-2026-17578
Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate withou...
EUVD-2026-53299
Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate withou...
CVE-2026-17578 Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement
Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate withou...
CVE-2026-17578
Kong Event Gateway vulnerable components: versions 1.0.0–1.1.1 and 1.2.0 fail to enforce key rotation before reaching the NIST SP 800-38D usage limit for AES-GCM keys when AWS IAM encryption is enabled. Under sustained high message rates that trigger a reboot without rotation, nonce collisions be...
CVE-2026-49004
creationtimestamp| type| source ---|---|--- 2026-08-05 08:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msd2vkjz6t2u...
CVE-2020-1230
creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:04+00:00| seen| https://t.me/timcorehacking/907 2026-08-06 00:00:54+00:00| seen| https://t.me/timcorehacking/907...
CVE-2020-9685
creationtimestamp| type| source ---|---|--- 2026-08-05 05:00:04+00:00| seen| https://t.me/timcorehacking/946 2026-08-06 00:00:56+00:00| seen| https://t.me/timcorehacking/946...